百卓Smart S85F 管理平台 CVE-2023-4120 SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-4120
• https://blog.csdn.net/m0_64366018/article/details/135602512
• https://cn-sec.com/archives/2025613.html
• https://zone.ci/vulns/msec/
• https://cve.imfht.com/detail/CVE-2023-4120
• https://github.com/advisories/GHSA-jvmm-xwpf-wmm2
• https://github.com/izj007/wechat/blob/main/articles/%5B%E4%B8%8D%E5%A4%9F%E5%AE%89%E5%85%A8%5D-2023-8-4-Smart%20S85F%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%20%E6%9C%80%E6%96%B0%E6%BC%8F%E6%B4%9E%E4%B8%A4%E6%9E%9A%20CVE-2023-4120%E5%92%8CCVE-2023-4121.md
• https://avd.aliyun.com/detail?id=AVD-2023-4120
• https://vuldb.com/vuln/235967
• https://blog.csdn.net/weixin_33709219/article/details/93726073
• https://github.com/qingchenhh/qc_poc/blob/main/2023%E5%B9%B4hvv%E7%9A%84day%E6%95%B4%E7%90%86.md

Related Vulnerabilities

• 旭辰資訊｜SmartIT Desktop Manager - 存在4個漏洞
• Apache Kafka UI /smartfilters/testexecutions 代码执行漏洞（CVE-2026-5562）
• PoCCVE-2026-24423: SmarterMail - Remote Code Execution
• 易宝 OA /SmartTradeScan/StockTake/SetScanQty txtBoxNo SQL 注入漏洞
• 太友 QSmart Audit 管理系统存在弱口令
• PoCSmarterMail ConnectToHub /api/v1/settings/sysadmin/connect-to-hub 命令执行漏洞（CVE-2026-24423）
• SmarterTools SmarterMail 远程代码执行漏洞(CVE-2026-24423)
• SmarterTools SmarterMail 权限管理不当漏洞
• PoCCVE-2026-23760: SmarterTools SmarterMail - Admin Password Reset
• PoCSmarterMail /api/v1/auth/force-reset-password 权限绕过漏洞
• SmarterMail 存在任意文件上传漏洞
• SmarterMail 存在任意密码重置漏洞